Services

Mobile Device Management

Data security and protection of data is of utmost importance in today’s technology. Mobile device management allows organisations to control, manage and monitor all devices on their company network.

Qbytec provides you with its expertise with a full range of MDM services from design through to installation and upgrades.

Unified Endpoint Manager (UEM) Design, Implementation, Installs & Upgrades

UEM delivers a complete endpoint management and policy control for your fleet of devices and applications. We can help create bespoke solutions to securely manage your endpoints on location or in the cloud.

UEM allows you to manage devices, enterprise apps and keep all your organisation’s data secure.

Project Management and Delivery

Our team have experience of delivering successful projects for clients in over 35 countries, backed by globally recognised accreditations.

We offer a range of professional project management services. What sets Qbytec apart from our competitors is our ability to complement traditional project management with innovative expertise in specialised areas. We pride ourselves on our ability to be able to pick up projects at any stage in the life cycle and turn them around to ensure minimal risk and cost.

With bespoke solutions ranging from progressing a slow moving project or a full PMO engagement with formal governance, we provide the expertise and the skills to complete the project. Regardless of the project location, the scale, budget, or size of the client we bring the same level of commitment to every project.

We bring new ideas to projects, leading our clients to the next level of excellence and believe in working alongside our clients. This ensures a thorough understanding of projects and their associated challenges so that we can provide the best possible solutions and help tailor processes to deliver a successful outcome.

Cyber Security

The use of mobile devices in businesses has grown phenomenally in the last few years. As a result there is an increased demand for use of devices owned by employees in the workplace with a range of mixed mobile platforms such as iOS, Android, Windows Phone and Blackberry. With this comes the challenge of managing security and safety within these environments. Our team of experts can help your business to create security platforms to support these devices.

We offer the following cyber security services:

External Pen Test

An External Infrastructure penetration test checks the entire, or nominated, exterior assets of a client infrastructure (i.e. anything that connects to the internet), using a variety of discovery and attack methods.

The purpose of the test is to learn more about the External Infrastructure security status, and gain intelligence into mitigating potential threats before harm is done. External Infrastructure assessments help provide assurance that a network is safe from external threats as breaches of external networks can result in significant loss of data as well as reputational damage and instability of key business functions.

External Infrastructure security testing should be part of all organisations risk assessment phase prior to changing or launching any new live services. We can provide scheduled monthly, or at hoc, External Infrastructure penetration testing services to a client to ensure their entire exterior is secure on an ongoing basis.

Internal Pen Test

An Internal Infrastructure penetration test reviews an organisation’s internal network, using a variety of vulnerability assessment and attack methods.

The output of the test activity is granular knowledge of the Internal Infrastructure threat surface, and intelligence enabling the mitigation of potential threats before harm is done.  Internal infrastructure testing is usually conducted at a client premises and is often scenario and risk based.  An assessment, for example, may explore the consequences of a rogue employee or contractor carrying out malicious activities, as an example of a scenario.

Internal Infrastructure security testing should be part of all organisation’s risk assessment methodology prior to, and following internal configuration changes, but also on an ongoing and regular basis to suit the customers threat appetite. We can provide scheduled regular Internal Infrastructure penetration testing services to our clients to ensure they are secure on an ongoing basis.

Web App Test

A website / web application penetration test aims to review an entire application. An assessed application will be subjected to a review for vulnerabilities (including those detailed within the OWASP Top Ten located at https://owasp.org/www-project-top-ten/) in order to identify any weaknesses that could allow an attacker to compromise the application, the data it interacts with, its users or the hosting environment. Website / Web application security testing should be part of all organisations risk assessment phase prior to launching live services. Qbytec takes web application security testing to the highest level, ensuring that a customer can release their web app, knowing it has been extensively scrutinised by industry leaders. We can provide scheduled monthly website / web application penetration testing services to our customers to ensure their web presence is secure on an ongoing basis.

The difference between the terms Website and Web Application:

• A website is typically considered a set of web pages viewed within a browser.  This may be a static set of pages that provide visitors with information; similar to a brochure, with limited interaction.
• Web applications are interactive sites or those that rely on and provide interactive elements and are predicated on user engagement.

Build Review

A build review penetration test checks the configuration and security controls of any given system using a variety of attack methods. Build reviews can be carried out against a number of systems including: workstations, laptops, servers, virtualised environments, mobile device management systems and end-user mobile devices. The purpose of the test is review the system against current industry best practices, government guidelines or compliance adherence. Build review assessments help provide assurance that the devices and network is safe from external and internal threats as breaches can result in significant loss of data. Build review testing should be part of any organisations risk assessment phase prior to changing or launching any new live services.

Code Review

A code review will be carried out on the product source code over several days calculated based on the programming language type and product complexity. This will involve detailed analysis of the code and will generate a list of vulnerabilities. Specific and general mitigation and remediation options and ongoing consultancy to resolve these issues. Providing a secure product to your customers requires a good understanding the types of threats that are prevalent in the industry today, how your product can be attacked and a full understanding of all the software used to build the product. With the shortage of cyber security skills in the industry and the increased time to market pressures, building and maintaining this knowledge and the expertise is difficult.

External Scan

An external scan checks the entire exterior of a client infrastructure (i.e. anything that connects to the internet), using a variety of attack methods.

The purpose of the test is to learn more about the External Infrastructure security status, and gain intelligence into mitigating potential threats before harm is done. External Infrastructure scans help provide assurance that a network is safe from external threats as breaches of external networks can result in significant loss of data.

External Infrastructure security testing should be part of any organisations risk assessment phase prior to changing or launching any new live services. We can provide scheduled monthly External Infrastructure penetration testing services to a client to ensure their entire exterior is secure on an ongoing basis.

Firewall Review

Firewall rule set reviews offer a detailed analysis and test of a firewall configuration that has been put in place to protect information, applications, systems and business operations. During a firewall review, a consultant will perform a line by line review of the configuration to identify and examine vulnerabilities which could be used to compromise the confidentiality, integrity or availability of data passing through the network. Securing firewall is a key requirement for information security. Although security controls may have already been implemented, it is important to ensure these controls have been deployed accurately and to security Best Practice standards. Firewall review testing should be part of any organisation’s risk assessment phase prior to and following any firewall configuration changes. Qbytec can provide scheduled firewall review services to our clients to ensure their entire interior is secure on an ongoing basis.

Mobile Application Review

A mobile application penetration test aims to review an entire application. An assessed application will be subjected to a review for vulnerabilities (including those detailed within the OWASP Mobile Top Ten located at https://owasp.org/www-project-mobile-top-10/ and the SANS Top 25 list) in order to identify any weaknesses that could allow an attacker to compromise the application, the data it interacts with, its users or the hosting environment. Mobile application security testing should be part of any organisation’s risk assessment phase prior to launching live services. We take mobile application security testing to the highest level, ensuring that a Customer can release their mobile application, knowing it has been extensively scrutinised by industry leaders. We can provide scheduled monthly mobile application penetration testing services to a Customer to ensure their mobile presence is secure on an ongoing basis.

Phishing Security Test

Phishing is the attempt to acquire sensitive information such as usernames, passwords, and credit card details, often for malicious reasons, by masquerading as a trustworthy entity in an electronic communication. Many of the recent high profile attacks have been leveraged using phishing techniques. Phishing emails may contain links to websites that are infected with malware. Phishing is typically carried out by email spoofing or instant messaging and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. From here hackers can then gain knowledge of sensitive information such as usernames and passwords. Phishing is an example of social engineering techniques used to deceive users, and exploits the poor usability of current web security technologies.

Other examples:

• Spear phishing is an example of targeting a certain department.
• Whaling is an example of targeting high profile professionals (i.e. CEO, CIO, Managing Directors etc.)

We can ascertain the level of security awareness of targeted personnel. We use various techniques, but they generally involve sending an email to random, or in some cases specific nominated personnel. The email asks the targeted personnel to take certain actions which will result in them giving sensitive information like usernames and passwords. This information is then intercepted by us and analysed, while the user is re-directed somewhere that looks genuine, in order to minimise suspicion.

Social Engineering

Social Engineering and Physical Security Assessments are designed to measure the human factor, and the physical controls in an organisation. Throughout the assessment Qbytec would attempt to gain unauthorised access to company offices, buildings, and other properties in order to determine the efficiency of physical security design in place and employee security awareness. On the completion of this assessment organisations will have the information to hand to improve their security awareness program. Qbytec can provide scheduled assessments throughout the year to a client to ensure that their premises are secure on an ongoing basis and that staff remain security aware and vigilant. Qbytec can also provide in-house security awareness workshops to mitigate any identified failings.

VPN Test

VPN is frequently adopted in order to provide secure access for remote workers to the internal network. Clearly, communications relayed over VPN will often contain sensitive client data. It is therefore vitally important that the connections remain secure and robust against malicious compromise. Any breach may impact the confidentiality, integrity and availability of data. Securing VPN is a key requirement for information security. Although security controls may have already been implemented, it is important to ensure these controls have been deployed accurately and to security Best Practice standards. VPN security testing should be part of any organisation’s risk assessment phase prior to and following any VPN configuration changes. We can provide scheduled monthly VPN penetration testing services to our clients to ensure their entire interior is secure on an ongoing basis.

Wireless Pen Test

Wireless technology has been widely adopted by almost all organisations due to ease of use and access. Internal communications travelling over this network may contain sensitive information and therefore it is essential that it is both appropriately secured and segregated. A breach of the wireless network would provide unauthorised access to the internal network potentially impacting the organisation’s data confidentiality, integrity and availability. Securing an organisation’s wireless network is a key requirement for information security. Although organisations have already implemented security controls for protecting their wireless network, it is very important to check whether they have implemented security controls and to security practice standards. Wireless security testing should be part of any organisation’s risk assessment phase prior to and following any wireless configuration changes. Qbytec can provide scheduled monthly wireless penetration testing services to our clients to ensure their entire interior is secure on an on-going basis.

We also carry out bespoke work, for further details please contact us.

Telecoms

Telecoms is an ever evolving industry, with new demands and knowledge required at regular intervals.

We pride ourselves on keeping ahead of the technology disruptors, to allow us to add value and efficiency with your telecommunications needs.

We have over 52 years experience in the telecoms industry including all of the network touch points, from the core, to edge and to wireless. As low latency networks become evermore reliant on data centres, we are able to utilise our advantage in having agreements with multiple data centres globally.

Advanced Cabling Systems

We support our customers to deploy telecom infrastructure networks through advanced cabling equipment supplies. We offer an assortment of infrastructure equipment (cables, components and accessories) that guarantee:

• Compliance: high quality, high reliability, speed of supply, on-time supply
• Efficiency: high bandwidth, qualified performance, harsh environment protection
• Dependability: material quality, durability
• Cost-Effectiveness: Improved costs, by adaptation of products to your specifications, and scaled supplies.

We pride ourselves on the strength of our global supply chain to supply reliable and cost-effective telecom infrastructure equipment like optical fibres, splitters, closures, chambers, covers, etc.

For more information contact us.